0

I am currently doing packet capture through mirroring with Wireshark as mentioned in this post

I can mirror the traffic to a port physically jacked into and analyze the packets redirected there w/ Wireshark. How can I, if possible, transport that traffic to a laptop or a remote device?

1

What you're looking for is called RSPAN - Remote Switch Port ANalyzer. RSPAN copies frames from a monitored port into a (dedicated) VLAN which you connect to the monitoring station.

  1. Set up a VLAN between the monitored switch and the monitoring station.
  2. Configure RSPAN from the monitored port into the RSPAN VLAN.

I found a detailed description for Brocade here.

| improve this answer | |
  • 1
    I do not know about Brocade, but Cisco also has ERSPAN that will actually route the traffic to a remote site, so you do not need a VLAN to span sites. – Ron Maupin Oct 9 at 14:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.